{"servers":[{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.kanywst/mcp-opa-authz","description":"Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.","repository":{"url":"https://github.com/kanywst/mcp-opa-authz","source":"github"},"version":"0.2.1","websiteUrl":"https://github.com/kanywst/mcp-opa-authz#readme","packages":[{"registryType":"oci","identifier":"ghcr.io/kanywst/mcp-opa-authz:0.2.1","transport":{"type":"stdio"},"environmentVariables":[{"description":"Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it.","format":"string","name":"AUTHZEN_PDP_URL"},{"description":"Authorization header value for the PDP. A value with no scheme is sent as \"Bearer <token>\".","format":"string","isSecret":true,"name":"AUTHZEN_PDP_TOKEN"},{"description":"Per-request timeout for PDP calls, as a Go duration. Default 10s.","format":"string","name":"AUTHZEN_PDP_TIMEOUT"},{"description":"Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s.","format":"string","name":"MCP_OPA_EVAL_TIMEOUT"},{"description":"Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process.","format":"boolean","name":"MCP_OPA_ALLOW_NETWORK_BUILTINS"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-08-19T18:51:00.298093Z","publishedAt":"2026-08-19T18:51:00.298093Z","updatedAt":"2026-08-19T18:51:00.298093Z","isLatest":true}}}],"metadata":{"count":1}}